- Home
- Open Source License Compliance Software
- ScanCode Toolkit
ScanCode Toolkit
Los Altos, California, United States
What it is
ScanCode Toolkit is a free software tool for examining codebases for code origin, copyrights, licenses, vulnerabilities, packages, and dependencies. It can run as a command-line program or as a library inside an application. For license detection, it checks text extracted from files against an index of license texts and rules. It can unpack archive contents recursively and extract text from binary files when needed, while recognizing package manifests, lockfiles, and other package datafiles. Results can be saved as JSON, YAML, JSON Lines, HTML, SPDX, Debian copyright, or CycloneDX; CSV output is marked deprecated. JSON results can be used in ScanCode Workbench and other applications that accept ScanCode data. Plugins can extend different stages and add license data. Installation choices include release archives, Docker, source, pip, and Fedora’s repository. Documentation lists Linux, macOS, and Windows as tested, with 64-bit operating system and Python requirements. The project directs users to community Slack and GitHub discussions for questions. Its output is provided without warranties and is not legal advice.
For and against
For
- Runs from the command line or as an application library.
- Scans archives recursively and can extract binary-file text.
- Recognizes many package manifests and lockfiles.
- Offers JSON, YAML, HTML, SPDX, and other output formats.
- Plugins can extend processing and add license data.
Against
- CSV output is marked deprecated.
- Documented platform requirements include 64-bit operating systems and Python.
- Scan output is not legal advice and comes without warranties.
The verdict
ScanCode Toolkit provides codebase scanning through command-line and library workflows, with multiple output formats and plugin options. Review its platform and Python requirements, and treat results as technical information rather than legal advice.
Who it suits
ScanCode Toolkit may suit developers and organizations reviewing codebases for licensing, provenance, package, or dependency information. It also fits teams that want to use scan results in another application or extend processing with plugins.
Plans and prices
ScanCode Toolkit
Free software code scanning tool
Read 2 Oct 2026 · scancode-toolkit.readthedocs.io
On the record
- Archive scanning
- The scanning process extracts files recursively from archives and extracts text from binary files when needed.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Extensibility
- Plugins can extend ScanCode at different stages, and users can add license data through external plugins.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Installation
- Installation options include release archives, Docker, source, pip, and Fedora’s repository.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Integration
- JSON scan results can be consumed by ScanCode Workbench and other applications that accept ScanCode result data.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Legal limitation
- The scan output says ScanCode is provided as-is without warranties and that its content should not be used as legal advice.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- License detection
- License detection searches an index of license texts and rules for matches in extracted file text.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Maker history
- nexB says it was founded in 2003 by Michael J. Herzog, Philippe Ombrédanne and François Granade.nexb.com · read 2 Oct 2026
- Output formats
- Scan results can be written as JSON, YAML, JSON Lines, HTML, SPDX, Debian copyright, or CycloneDX; CSV is marked deprecated.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Package support
- It supports a wide variety of package manifests, lockfiles and package datafiles containing package and dependency information.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Platform requirements
- The documentation lists Linux, macOS and Windows as tested platforms and specifies 64-bit operating systems and Python requirements.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Purpose
- ScanCode Toolkit scans codebases to detect code origin, copyrights, licenses, vulnerabilities, packages and dependencies.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Support
- The project directs users to its community Slack and GitHub discussions for questions and challenges.scancode-toolkit.readthedocs.io · read 2 Oct 2026
- Use modes
- It can be used as a command-line tool or as a library in an application.scancode-toolkit.readthedocs.io · read 2 Oct 2026
